Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: q3mxqWNEs0XybvsXPEMVuKpI5IwTV2D4v66uaxVmum8=
Subject key identifier: 11:21:1B:91:41:4C:8A:25:CC:D4:7D:E6:16:04:CA:1B:3A:29:EF:6F
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01A185D1A41BAF2E1FFC835B7C96734B085B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 060F
Signing time: Thu 29 Oct 2026 04:01:11 +0000
Manifest this update: Thu 29 Oct 2026 04:01:11 +0000
Manifest next update: Fri 30 Oct 2026 04:01:11 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: K1PzzkcIf1MXAax1NPm03mEvPb7trR6ZQCZdirH3avg=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:a4:1b:af:2e:1f:fc:83:5b:7c:96:73:4b:08:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Oct 29 04:01:11 2026 GMT
Not After : Oct 30 04:01:11 2026 GMT
Subject: CN=11211b91414c8a25ccd47de61604ca1b3a29ef6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:f5:fa:db:a9:0f:7b:2e:ae:5e:85:ca:67:
24:39:0d:29:70:d4:d9:40:c9:4b:bc:60:bb:c1:33:
ab:58:22:1a:70:7c:5b:bd:9d:2a:30:aa:68:0c:21:
36:28:2c:58:7d:25:5c:ed:ff:04:c7:5f:e8:6f:52:
d0:ce:19:15:7e:c2:4a:30:54:de:24:32:c6:09:be:
12:0c:90:c9:58:a7:0f:07:6e:bb:64:ca:67:03:04:
6f:ef:20:10:61:b0:e3:98:5c:0c:49:b2:1e:24:0e:
4a:33:47:c2:9e:ca:ed:ed:7e:d9:14:c8:c6:c1:f8:
47:06:30:85:1d:c5:cd:57:88:4a:0e:6c:73:c9:54:
48:a6:dc:c8:d3:4d:1a:af:eb:a4:f9:d8:a7:c0:ac:
1f:c0:16:a7:d8:89:85:6c:b5:a8:7a:ac:49:08:0f:
c3:a1:d8:9e:b2:9c:83:5e:31:ea:57:6f:73:af:8e:
b6:8c:93:e6:37:f3:d9:9b:61:a6:b8:b6:8c:0b:f7:
4a:2c:a1:90:55:39:b4:43:c9:2b:78:8c:cf:d3:5e:
f2:8a:ee:61:55:41:13:09:ec:71:1a:54:85:8d:7e:
1b:18:5d:23:cf:ab:6b:a6:45:7f:90:bc:3e:d6:6c:
cd:95:d7:da:80:92:16:46:54:e0:72:8f:67:e0:9f:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:21:1B:91:41:4C:8A:25:CC:D4:7D:E6:16:04:CA:1B:3A:29:EF:6F
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:62:96:f0:8c:90:5a:a8:dd:10:8f:db:c7:7f:55:67:60:f1:
fa:a4:21:a6:0f:a5:08:82:c2:13:35:0d:77:78:92:49:a6:d0:
fc:2a:1d:de:db:b5:ca:c5:17:63:22:b5:b9:6e:7f:42:f6:d8:
0e:57:5d:db:8f:0f:3f:56:8a:4b:b6:95:8c:12:d3:a7:4f:5c:
1e:da:5d:9c:e7:2e:f1:b2:45:08:11:46:72:69:01:4b:21:b0:
db:3d:e6:17:fb:5b:2c:94:b8:95:17:d6:90:04:09:14:e0:18:
d4:d3:2d:0e:c6:3c:b3:b3:ec:07:33:da:da:3e:a1:7e:3b:cf:
58:27:df:78:31:e7:aa:14:d1:96:c7:0a:73:db:30:f3:f8:4c:
03:9c:93:0f:9e:b4:9a:86:d4:62:a7:f4:f5:1e:16:c1:ab:70:
e1:7f:82:e6:c3:eb:81:42:a6:5d:a6:3d:fb:33:13:ca:49:8d:
e6:6f:1b:f1:3c:76:37:eb:18:4c:38:c0:6a:e6:b5:ec:85:0c:
9c:31:22:85:9a:16:b6:be:07:96:3d:66:bc:d2:20:19:b1:9e:
8e:24:e5:b8:e6:17:10:82:2c:7b:1d:62:02:a9:15:ba:47:4d:
b0:9e:e0:9c:e5:2c:1d:8f:12:22:2a:04:aa:8b:65:f0:92:d5:
77:6c:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:39 2026 by rpki-client